# Machine and Workload Identity

Published articles for Machine and Workload Identity.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Workload Identity Meets Supply Chain Security: Teleport's Sigstore Integration

DevFeed: [Workload Identity Meets Supply Chain Security: Teleport's Sigstore Integration](<https://devfeed.tech/articles/workload-identity-meets-supply-chain-security-teleport-s-sigstore-integration-29974.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/workload-identity-meets-supply-chain-security/>)

Author: daniel.upton@goteleport.com (Dan Upton)

Published: 2025-06-05T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [sigstore](<https://devfeed.tech/topics/sigstore.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>)

Tags: [attestation](<https://devfeed.tech/tags/attestation.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [machine-and-workload-identity](<https://devfeed.tech/tags/machine-and-workload-identity.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [provenance](<https://devfeed.tech/tags/provenance.md>), [security](<https://devfeed.tech/tags/security.md>), [signing](<https://devfeed.tech/tags/signing.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [teleport](<https://devfeed.tech/tags/teleport.md>)

### AI overview

This article explains how Teleport integrates with Sigstore to strengthen software supply chain security for workload identity. It describes signing software artifacts and attestations, and explains Sigstore's keyless approach using single-use certificates tied to OIDC identities.

### Source excerpt

Learn how to use Teleport's integration with Sigstore to build supply chain security into your workload identity.

## Your Infrastructure Has a Non-Human Trust Problem

DevFeed: [Your Infrastructure Has a Non-Human Trust Problem](<https://devfeed.tech/articles/your-infrastructure-has-a-non-human-trust-problem-29982.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/your-infrastructure-has-a-non-human-trust-problem/>)

Author: jack.pitts@goteleport.com (Jack Pitts)

Published: 2025-06-04T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [cloud security](<https://devfeed.tech/topics/cloud-security.md>), [Zero Trust](<https://devfeed.tech/topics/zero-trust.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [GitLab](<https://devfeed.tech/topics/gitlab.md>), [Jenkins](<https://devfeed.tech/topics/jenkins.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [agents](<https://devfeed.tech/tags/agents.md>), [auditability](<https://devfeed.tech/tags/auditability.md>), [aws](<https://devfeed.tech/tags/aws.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [cloud-security](<https://devfeed.tech/tags/cloud-security.md>), [credentials](<https://devfeed.tech/tags/credentials.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [gitlab](<https://devfeed.tech/tags/gitlab.md>), [jenkins](<https://devfeed.tech/tags/jenkins.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [machine-and-workload-identity](<https://devfeed.tech/tags/machine-and-workload-identity.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [token](<https://devfeed.tech/tags/token.md>), [tokens](<https://devfeed.tech/tags/tokens.md>), [zero-trust](<https://devfeed.tech/tags/zero-trust.md>)

### AI overview

This article explains how non-human identities, including bots, CI/CD runners, and AI-driven automation, can create cloud security and resiliency risks when they use static credentials and excessive permissions. It presents Teleport Machine & Workload Identity as a way to use short-lived, scoped cryptographic credentials and reviews CI/CD deployment to Kubernetes as an example.

### Source excerpt

Non-human identities are a major cloud security risk. Learn how to eliminate static credentials, enforce zero trust, and secure machine-to-machine access.

## How to provision certificates for internal services with Teleport Workload Identity

DevFeed: [How to provision certificates for internal services with Teleport Workload Identity](<https://devfeed.tech/articles/how-to-provision-certificates-for-internal-services-with-teleport-workload-identity-29715.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/internal-service-certificates-with-workload-identity/>)

Author: noah@goteleport.com (Noah Stride)

Published: 2025-02-18T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [certificates](<https://devfeed.tech/topics/certificates.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [TLS handshake](<https://devfeed.tech/topics/tls-handshake.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [trust](<https://devfeed.tech/topics/trust.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Network](<https://devfeed.tech/topics/network.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [featured](<https://devfeed.tech/tags/featured.md>), [machine-and-workload-identity](<https://devfeed.tech/tags/machine-and-workload-identity.md>), [networks](<https://devfeed.tech/tags/networks.md>), [security](<https://devfeed.tech/tags/security.md>), [tls](<https://devfeed.tech/tags/tls.md>), [tls-handshake](<https://devfeed.tech/tags/tls-handshake.md>), [trust](<https://devfeed.tech/tags/trust.md>), [x509](<https://devfeed.tech/tags/x509.md>)

### AI overview

This tutorial explains how to provision X.509 certificates for internal services with Teleport Workload Identity. It covers TLS, mutual TLS, certificate authorities, workload identity, and the role of certificates in authenticating services and securing internal traffic.

### Source excerpt

Learn how to securely provision X509 certificates to secure traffic between internal services using mTLS and Teleport Workload Identity.

## How to use Teleport Machine ID to provide database access to applications running on EKS without passwords

DevFeed: [How to use Teleport Machine ID to provide database access to applications running on EKS without passwords](<https://devfeed.tech/articles/how-to-use-teleport-machine-id-to-provide-database-access-to-applications-running-on-eks-without-passwords-29549.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/access-aws-rds-eks-teleport-machine-id/>)

Author: info@goteleport.com (Gavin Frazar)

Published: 2024-12-03T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Amazon Elastic Kubernetes Service](<https://devfeed.tech/topics/amazon-elastic-kubernetes-service.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [PostgreSQL](<https://devfeed.tech/topics/postgresql.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [AWS Fargate](<https://devfeed.tech/topics/aws-fargate.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [Amazon Elastic Container Service](<https://devfeed.tech/topics/amazon-elastic-container-service.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [container](<https://devfeed.tech/topics/container.md>), [Amazon VPC](<https://devfeed.tech/topics/amazon-vpc.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [api-keys](<https://devfeed.tech/tags/api-keys.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-fargate](<https://devfeed.tech/tags/aws-fargate.md>), [aws-iam](<https://devfeed.tech/tags/aws-iam.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [container](<https://devfeed.tech/tags/container.md>), [databases](<https://devfeed.tech/tags/databases.md>), [ecs](<https://devfeed.tech/tags/ecs.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [machine-and-workload-identity](<https://devfeed.tech/tags/machine-and-workload-identity.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [postgres](<https://devfeed.tech/tags/postgres.md>), [postgresql](<https://devfeed.tech/tags/postgresql.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [tls](<https://devfeed.tech/tags/tls.md>), [vpc](<https://devfeed.tech/tags/vpc.md>)

### AI overview

A tutorial on deploying Temporal on Amazon EKS so it can connect to an AWS RDS PostgreSQL database without passwords or other shared secrets. It uses Teleport Machine & Workload Identity, a sidecar, short-lived X.509 certificates, PostgreSQL role provisioning, and a Teleport Database Service deployed on AWS Fargate.

### Source excerpt

Discover how to secure database access in Kubernetes workloads. Eliminate secrets, keep databases in private networks, and improve audit logging with Teleport.

## Teleport Workload Identity

DevFeed: [Teleport Workload Identity](<https://devfeed.tech/articles/teleport-workload-identity-29975.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/workload-identity/>)

Author: ben@goteleport.com (Ben Arent)

Published: 2024-04-11T00:00:00Z

Content type: article

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [SPIFFE](<https://devfeed.tech/topics/spiffe.md>), [SPIRE](<https://devfeed.tech/topics/spire.md>), [Security](<https://devfeed.tech/topics/security.md>), [software-architecture](<https://devfeed.tech/topics/software-architecture.md>), [Microservices](<https://devfeed.tech/topics/microservices.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [Zero Trust](<https://devfeed.tech/topics/zero-trust.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [bootstrapping](<https://devfeed.tech/tags/bootstrapping.md>), [identity](<https://devfeed.tech/tags/identity.md>), [machine-and-workload-identity](<https://devfeed.tech/tags/machine-and-workload-identity.md>), [preview](<https://devfeed.tech/tags/preview.md>), [security](<https://devfeed.tech/tags/security.md>), [services](<https://devfeed.tech/tags/services.md>), [spiffe](<https://devfeed.tech/tags/spiffe.md>), [spire](<https://devfeed.tech/tags/spire.md>), [teleport](<https://devfeed.tech/tags/teleport.md>), [tls](<https://devfeed.tech/tags/tls.md>), [x509](<https://devfeed.tech/tags/x509.md>), [zero-trust](<https://devfeed.tech/tags/zero-trust.md>)

### AI overview

An introduction to Teleport Workload Identity, a preview feature that bootstraps and issues identities to services across heterogeneous environments and organizational boundaries. It builds on SPIFFE and adds a SPIFFE workload API endpoint, SVID issuance, TPM server attestation, and AWS Roles Anywhere support.

### Source excerpt

An introduction to Teleport Workload Identity, a preview feature for bootstrapping and issuing identities to services across heterogeneous environments.

## Teleport 9 - How We Built Machine ID

DevFeed: [Teleport 9 - How We Built Machine ID](<https://devfeed.tech/articles/teleport-9-how-we-built-machine-id-29698.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/how-we-built-machine-id/>)

Author: sakshyam.shah@goteleport.com (Sakshyam Shah)

Published: 2022-04-08T00:00:00Z

Content type: article

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Automation](<https://devfeed.tech/topics/automation.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [Security](<https://devfeed.tech/topics/security.md>), [ssh](<https://devfeed.tech/topics/ssh.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [automation](<https://devfeed.tech/tags/automation.md>), [aws-iam](<https://devfeed.tech/tags/aws-iam.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [machine-and-workload-identity](<https://devfeed.tech/tags/machine-and-workload-identity.md>), [product](<https://devfeed.tech/tags/product.md>), [security](<https://devfeed.tech/tags/security.md>), [ssh](<https://devfeed.tech/tags/ssh.md>), [teleport](<https://devfeed.tech/tags/teleport.md>)

### AI overview

This post explains how Teleport built Machine ID to automate the issuance and renewal of short-lived certificates for machine-to-machine infrastructure access. It describes authentication through AWS IAM joining or one-time join tokens and the use of a lightweight renewal agent.

### Source excerpt

This post explains how we built Machine ID, our latest product which automates short-lived certificate issuance and renewal for machine-to-machine access at scale.